2026 ACUA Virtual Spring Summit
2026-03-24 07:00 - 2026-03-26 17:00 (America/New_York)
The 2026 ACUA Virtual Spring Summit is March 24 – 26, 2026. This three-day professional education event, designed to deliver 18 CPE hours across three dynamic tracks, will be a platform for higher education internal auditors from across the country to share their expertise and learn from each other.

Learn More & Register Now

From Risk to Recommendations: Part II (Conforming to Standards Domain V for Advisory Services)
2026-04-15 13:00 - 14:00
From Risk to Recommendations: Part II (Conforming to Standards Domain V for Advisory Services)

Wednesday, April 15, 2026 1:00 PM – 2:00 PM ET

Register Today!

Continue the conversation with ACUA’s Auditing and Accounting Principles sub-committee. How does your internal audit function conform with Domain V of the Standards when performing advisory services? Join us in several breakout discussions exchanging experiences with your peers.

After attending this webinar, participants will be able to…

After attending this webinar, participants will be able to

Plan activities specific to your institution to achieve conformance with the new IIA Global Standards 13.2, 14.2, & 15.2 when performing advisory services.

Articulate expectations of the new IIA Global Standards 13.2-Engagement Risk Assessments, 14.2-Analysis and Potential Engagement Findings, and 15.2-Confirming the Implementation and Recommendations or Action Plans when performing advisory services.

Identify operational changes your organization has made, or needs to make, to conform with the new IIA Global Standards 13.2, 14.2, & 15.3 when performing advisory services.

Delivery Method: Group InternetField of Study: AuditingAdvance Preparation: NonePrerequisites are required: NoCost: Free for members; members onlyRecommended CPEs: 1

Resources

Moderator Information

Jennifer Dent, CPA, CISA, CFE

University of South Florida

15+ year audit experience in Public Accounting and Government with 3 years in Higher Ed.

Erin Egan, CPA, CIA

Rutgers University

25 years audit and advisory experience. 9 years in public accounting. 16 years in higher education.

Susie Geiger

The University of Kansas

4 years in higher education internal auditing.

Melissa Primus, CPA, CIA

Minnesota State

25+ years in audit and advisory in higher education and 4 years of external auditing experience.

John McDaniel, CPA, CIA, CISA, CRMA

University of Alabama System

20+ years of audit and operational experience in higher ed and 5 years external auditing experience.

Endpoint Security
2026-04-23 13:00 - 14:00
Endpoint Security

Thursday, April 23, 2026 1:00 PM – 2:00 PM ET

Register Today!

Endpoint security is vital for higher education institutions due to diverse devices, including university-owned systems, personal devices, research tools, and IoT, all accessing sensitive data. Weak security can lead to breaches, data theft, and operational disruption. This audit program evaluates endpoint security controls to protect confidentiality, integrity, and availability of information assets. It offers flexibility for comprehensive or targeted audits based on institutional needs. Key risk areas include malware, unpatched software, access management, data exfiltration, inadequate monitoring, device loss, phishing, shadow IT, BYOD/BYOC, open-source tools, and IoT. Addressing these ensures resilience against traditional and emerging cyber threats.

After attending this webinar, participants will be able to…

Understand the importance of endpoint security in higher education.

Identify common endpoint risks and vulnerabilities.

Assess the effectiveness of endpoint security controls.

Apply flexible audit methodologies based on institutional needs.

Delivery Method: Group InternetField of Study: Information TechnologyAdvance Preparation: MaterialsPrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Resources

Host Information

Mayur Patel

Director, IT Audit

Columbia University

I am a senior technology and risk executive with over 20 years of experience leading enterprise technology, cybersecurity, and governance functions across higher education, financial services, and publicly traded organizations. My career has focused on aligning technology strategy with institutional and business objectives while maintaining strong operational discipline, risk management, and regulatory compliance.

I currently serve as Director of Information Technology Audit at Columbia University, where I provide enterprise-wide oversight of technology governance, cybersecurity, and control environments supporting complex academic and financial operations. I work closely with senior leadership to enhance technology resilience, modernize processes, and improve risk visibility across critical systems.

Previously, I have held leadership roles at Yext, Panasonic, Vonage, and Prudential Financial, advising executive management and boards on technology risk, cloud security, regulatory readiness, and large-scale transformation initiatives. My experience spans infrastructure, application development, cloud platforms, vendor management, and business continuity.

I hold a Master’s degree in Cybersecurity and a Bachelor’s degree in Computer Science, and I maintain multiple industry certifications including CISSP, CISM, CISA, and CRISC.

Leveraging Data Analytics in Sponsored Research Audits
2026-05-21 13:00 - 14:00
Leveraging Data Analytics in Sponsored Research Audits

Thursday, May 21, 2026 1:00 PM – 2:00 PM ET

Register Today!

The ACUA Data Analytics Sub-Committee is hosting a webinar on sponsored research data analytics, designed to provide members with practical insights into applying data analytics to sponsored research audits. This session will (1) provide a high-level overview and introduction to sponsored research; and (2) feature demonstrations of key analytics using readily available tools, along with examples of how these approaches can identify anomalies and enhance audit effectiveness.

Participants will gain a foundational understanding of sponsored research expense data and see real-world applications of associated audit analytics. This webinar is an excellent opportunity to strengthen your data analytics skills by applying them to sponsored research auditing.

After attending this webinar, participants will be able to…

Explain key sponsored research concepts, including an overview of current trends, emerging issues, and common audit focus areas.

Apply data analytics techniques to assess risks and strengthen the effectiveness of sponsored research audits.

Evaluate practical uses of readily available data analytics tools through demonstrations illustrating how these tools support sponsored research audit activities.

Delivery Method: Group InternetField of Study: Specialized KnowledgeAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Resources

Host Information

John Snedeker, MA, CIA, CISA, CISSP, CDPSE

Associate Director of Information Systems Audit, Department of Internal Audit

The Ohio State University

John Snedeker is the Associate Director of Information Systems Audit at The Ohio State University, where he leads technology focused audit and advisory engagements across a large, complex higher education and academic medical center environment. His experience includes IT audits supporting clinical systems, research and academic operations, and health information technology, as well as IT governance, third party risk management, and data analytics. John is an active volunteer with ACUA and ISACA and contributes to peer reviews, quality assurance activities, and professional development initiatives. He shares his knowledge with peers across the country on emerging IT risks and practical audit approaches relevant to higher education and medical centers.

Angie Wilson, CIA

Audit Manager, Department of Internal Audit

The Ohio State University

Angie Wilson is an Audit Manager in the Department of Internal Audit at The Ohio State University. Angie co-leads a team of financial and operational auditors that focuses on audit engagements and advisory activities among numerous activities within the university. Angie spent the first 6 years of her career in departmental research administration before pursuing a career in internal audit in higher education and has extensive experience regarding research compliance. Angie also obtained the Certified Internal Auditor (CIA) designation through the IIA.

Curtis Josey Jr, MEng., CIA, CISA, ACDA

Associate Director of Analytics and Data Strategy, Office of the Chief Risk Officer

Cornell University

Curtis Josey Jr, MEng., CIA, CISA, ACDA is the Associate Director of Analytics and Data Strategy in Cornell University’s Office of the Chief Risk Officer. He is known for translating research theory, industry standards, and risk frameworks into clear, actionable solutions for audit, risk, and compliance leaders. Curtis has 15+ years of higher education experience and is a 2026 candidate in the joint Cornell – Queen’s MBA program. He regularly speaks at industry conferences and webinars on AI and analytics, cybersecurity, internal auditing, integrated risk assessments, and timely assurance – most recently at ACUA’s AuditCon 2025.

ACUA 2026 Virtual Membership Meeting
2026-06-23 14:00 - 15:00
ACUA 2026 Virtual Membership Meeting

Tuesday, June 23, 2026 2:00 PM – 3:00 PM ET

Register Today!

Join ACUA President Nichole Pittman and other board members for ACUA’s 2026 Virtual Membership Meeting. We are excited to share organizational information including: committee updates, membership, and financial progress.

Delivery Method: Group InternetField of Study: AuditingAdvance Preparation: NonePrerequisites are required: NoCost: Free for members; members onlyRecommended CPEs: 0

Moderator Information

Nichole Pittman, CIA, CISA, CFE

ACUA President

The University of Alaska

We are excited to share organizational information including: committee updates, membership, and financial progress.

Auditing the Modern University: 10 IT Risk Trends Shaping Higher Education
2026-06-25 13:00 - 14:00
Auditing the Modern University: 10 IT Risk Trends Shaping Higher Education

Thursday, June 25, 2026 1:00 PM – 2:00 PM ET

Register Today!

Higher education institutions operate some of the most complex digital environments of any sector supporting teaching and learning, advanced research, healthcare delivery, athletics, and global operations often with highly decentralized governance. As technology adoption accelerates, traditional IT audit approaches are increasingly strained, and internal audit functions are being asked to provide assurance and insight across rapidly evolving risk landscapes.

This session explores the Top 10 IT Audit Trends impacting colleges and universities, translating emerging technology risks into practical, higher‑education‑specific audit considerations. Participants will examine how trends such as cloud‑based learning management systems (LMS), ransomware threats, third‑party edtech ecosystems, AI and generative AI adoption, data governance complexity, research data protection, smart campus technologies, digital payments, and international campus operations are reshaping the scope and expectations of IT audit.

Each trend is anchored in real campus scenarios including academic systems, research environments, health centers, athletics, and global programs and paired with sample audit questions and scoping considerations. The session emphasizes how internal audit can evolve from traditional compliance‑focused reviews to more risk‑based, forward‑looking assurance and advisory work that resonates with institutional leadership.

Designed for internal audit, risk, and compliance professionals, this course provides actionable insights participants can use immediately to refine audit plans, engage more effectively with IT and business stakeholders, and communicate technology risk in a way that supports institutional objectives.

After attending this webinar, participants will be able to…

Identify the top 10 emerging IT audit trends currently impacting colleges and universities, including technology, regulatory, and operational risk drivers unique to higher education.

Understand how evolving digital strategies such as cloud migration, ERP modernization, learning management systems, and AI adoption are changing the IT risk landscape across academic institutions.

Assess the audit implications of increasing cyber, privacy, and third party risks, including ransomware, data governance, vendor ecosystems, and decentralization of IT environments.

Evaluate how internal audit functions can adapt audit plans, skill sets, and methodologies to remain relevant and effective amid rapid technological change.

Apply practical audit considerations and leading practices to strengthen assurance, advisory value, and collaboration with IT, compliance, and institutional leadership.

Translate emerging IT risks into board and leadership ready insights, enabling clearer communication of technology risk, controls, and assurance needs.

Delivery Method: Group InternetField of Study: Information TechnologyAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Resources

Host Information

Matthew Hoverman

Principal

CliftonLarsonAllen LLP

Matt is a Principal within CLA’s Business Risk Services group and leads the firm’s higher education enterprise risk and internal audit practice.

Michael Flory

Manager

CliftonLarsonAllen LLP

Mike is a Manager within CLA’s Business Risk Service team and supports the higher education enterprise risk and internal audit practice.

AI & Audit Workpapers: IIA Alignment, Risks, and Practical Controls
2026-07-08 14:00 - 15:00
AI & Audit Workpapers: IIA Alignment, Risks, and Practical Controls

Wednesday, July 8, 2026 2:00 PM – 3:00 PM ET
Registration is now closed

This roundtable will focus on what “good” audit documentation looks like in practice—especially when teams are using AI to draft, summarize, or analyze workpapers. We’ll start with a brief overview of relevant IIA Standards and the baseline expectations they set for sufficient documentation and documented supervision. Participants will then break into two groups—documentation preparers and documentation reviewers—to discuss what each side needs to see in the file, where gaps commonly occur, and how expectations differ across teams. Each group will identify practical, low-friction controls that can be implemented immediately (e.g., minimum metadata, source traceability, validation steps, and review sign-offs) to better align workpapers with overall documentation expectations. We’ll close by sharing key takeaways and a short list of actions participants can take back to their shops.

Delivery Method: Group InternetField of Study: AuditingAdvance Preparation: NonePrerequisites are required: NoCost: Free for members; members onlyRecommended CPEs: 0

Moderator Information

Tino Stivaros

Senior Auditor, CPA

Tino Stivaros, CPA, is a Senior Auditor at the University of Washington, where he leads investigations into ethics violations and losses of state resources across a multi-campus university and hospital system. With over a decade of experience in internal audit, compliance, and investigations, Tino has held senior roles in higher education, state government, and public transit — including Audit Chief at the Vermont Agency of Transportation and Senior Auditor at the MTA Office of the Inspector General in New York.

Tino holds an M.S. in Accountancy from Baruch College, CUNY, and a B.A. in Philosophy, Summa Cum Laude, from the University of Massachusetts Amherst.

Ashvin Thomas

IT Audit Manager

Ashvin Thomas is an IT Audit Manager with the University of Washington’s Internal Audit team in Seattle. He coordinates and executes IT audits across the University, including managing the IT portion of the annual audit plan. His work covers information security, identity and access management, IT general controls, cloud platforms, disaster recovery, and major system changes (Workday and Epic). He holds CISA and CIA certifications.

Traditional NCAA Compliance Risks Remain Despite Changing College Athletics Landscape
2026-07-30 13:00 - 14:00
Traditional NCAA Compliance Risks Remain Despite Changing College Athletics Landscape

Thursday, July 30, 2026 1:00 PM – 2:00 PM ET

Register Today!

NIL, revenue sharing, the transfer portal, litigation, the advent of the College Sports Commission, and the possibility of federal legislation regulating college athletics are just some of the significant events in college athletics these last few years. Despite myriad changes to the college athletics landscape, traditional NCAA compliance risks in the areas of eligibility certification, athletically-related financial aid, recruiting, and practice monitoring remain. This course shares data and information regarding these risks to help inform auditors who have – or seek to have – involvement with athletics.

After attending this webinar, participants will be able to…

Possess awareness of the existence of traditional NCAA compliance risks (e.g., eligibility certification, financial aid, recruiting, practice monitoring) in the modern college athletics landscape

Be aware of potential ramifications of a university’s failure to comply with NCAA rules and requirements in these areas

Understand how traditional auditing functions can apply to these areas.

Delivery Method: Group InternetField of Study: AuditingAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Resources

Host Information

Josh Lens, J.D.

Owner/President

The Compliance Group

A former attorney in private practice and compliance administrator at Baylor University, Lens owns and runs The Compliance Group (TCG). TCG provides both proactive and reactive consulting services to college athletics conferences and universities. Lens also teaches sport management and sport law courses for The University of Iowa and The University of Iowa College of Law. He has published over 30 academic articles, primarily regarding compliance and legal issues in college athletics. Lens’s work has been featured by media outlets including Chicago Tribune, The New York Times, the Associated Press, Sportico, The Athletic, CBSSports,com, and The Paul Finebaum Show. Lens can be reached at jlens@tcgathletics.com.

ACUA Member Webinar Series: Inside the Mentorship Program
2026-08-11 14:00 - 15:00
ACUA Member Webinar Series: Inside the Mentorship Program

Tuesday, August 11, 2026 2:00 PM – 3:00 PM ET

Register Today!

Join us for an engaging session highlighting the impact and value of the ACUA Mentorship Program – a dynamic initiative designed to cultivate professional growth, leadership development, and long-lasting connections within our organization.

During this event, Natalie Harrison, Director of the ACUA Mentorship Program, will provide an overview of the program’s mission and objectives. Attendees will have the opportunity to hear directly from a successful Mentor/Mentee pair, who will share their experiences, insights, and how their relationship has helped shape their professional journeys.

In the second half of the webinar, we will open the floor for questions – providing a chance for attendees to engage, explore, and connect with the speakers and program leaders.

Whether you are considering becoming a mentor, seeking mentorship, or simply want to learn more about the program’s impact, this session offers valuable takeaways for all.

Don’t miss this opportunity to be inspired and see mentorship in action!

Participants will be able to…

Hear about the mentorship program and have the opportunity to hear directly from a successful Mentor/Mentee pair, who will share their experiences, insights, and how their relationship has helped shape their professional journeys.

Delivery Method: Group InternetField of Study: Personal DevelopmentAdvance Preparation: NonePrerequisites are required: NoCost: Free for members; members onlyRecommended CPEs: 0

Moderator Information

Natalie Harrison

Senior Auditor

Natalie Harrison, CPA, MBA is a Senior Auditor at Rutgers, The State University of New Jersey

Kristen Law

Project Manager

Kristin Law, Project Manager, Internal Audit & Advisory Services at Boston University

Earl Jackson

Internal Auditor

Earl Jackson is an Internal Auditor at University of North Carolina at Chapel Hill, and Chair of the Membership Committee.

Beyond the Award Letter: Auditing Grant Management Risk in Higher Education
2026-08-13 13:00 - 14:00
Beyond the Award Letter: Auditing Grant Management Risk in Higher Education

Thursday, August 13, 2026 1:00 PM – 2:00 PM ET

Register Today!

Federal and state grant funding brings valuable resources to colleges and universities along with significant, ongoing compliance obligations. The real risk doesn’t end when the award letter is signed; it lives in the day-to-day administration of the award.

This session moves internal auditors beyond the award notice to examine how grant funds are actually managed across the full award lifecycle from budget monitoring and effort reporting to subrecipient oversight, cost allowability, and closeout. Jen and Angie will share a practical, risk-based framework for scoping grant management audits, evaluating institutional controls, and keeping audit programs current with Uniform Guidance (2 CFR 200) requirements.

After attending this webinar, participants will be able to…

Identify key risk areas across the grant lifecycle including cost allowability, time and effort reporting, and subrecipient monitoring that extend well beyond the initial award.

Evaluate institutional internal controls over grant administration and recognize common control gaps specific to higher education environments.

Apply a risk-based approach to scoping and planning grant management audits aligned with Uniform Guidance (2 CFR 200) requirements.

Develop practical audit test steps and sampling strategies for grant compliance reviews.

Recognize emerging risk trends and red flags in federal and state grant funding that warrant increased audit attention.

Delivery Method: Group InternetField of Study: Specialized KnowledgeAdvance Preparation: NonePrerequisites are required: NoCost: $25 for non-membersRecommended CPEs: 1

Resources

Host Information

Jen Butler

Partner

EisnerAmper

Jennifer Butler is a Partner at EisnerAmper, where she leads Government Sector Services for the firm’s advisory practice. With more than 20 years in executive leadership, she brings deep expertise in federal grants management, disaster recovery, and higher education compliance. Jennifer previously held a leadership role at Louisiana State University, where she helped advance the mission of applied research and executive education in disaster management. For over 20 years, she has worked closely with applied research institutes and higher education institutions, managing grants and centers of excellence and serving as principal investigator on federally funded programs. Jennifer holds a BS in History from Oklahoma City University and an MS in Homeland Security Leadership from the University of Connecticut, along with a Master’s Certificate in Federal Grant Management. She is a frequent speaker on grants compliance and disaster recovery for higher education and government audiences.

Angie Brown

Senior Manager

EisnerAmper

Angie Brown is a Senior Manager at EisnerAmper and leads the Grants Management practice with more than 20 years of experience in grants management, sponsored programs, and regulatory compliance. During her career she led the Sponsored Programs Office at Pennington Biomedical Research Center, where she managed the lifecycle of externally funded research awards, including proposal development, post-award administration, financial oversight, sponsor reporting, and compliance with federal regulations. Today, Angie advises colleges and universities, healthcare organizations, state and local governments, and nonprofit organizations on Uniform Guidance (2 CFR Part 200), internal controls, subrecipient monitoring, risk assessments, indirect cost strategies, and grants management best practices. A frequent national presenter and trainer, she enjoys translating complex regulatory requirements into practical, actionable guidance that helps institutions strengthen stewardship of sponsored funds, reduce compliance risk, and improve operational effectiveness.

AuditCon 2026
2026-09-27 08:00 - 2026-10-01 17:00 | Sheraton New Orleans Hotel, 500 Canal Street, New Orleans, Louisiana, 70130, United States
The 2026 ACUA AuditCon will be held in-person September 27 – October 1, 2026, at the Sheraton New Orleans Hotel in New Orleans, Louisiana.
